feature proposal: option to ignore pushed search domains
As far as I understand it, openconnect always adds the search domains that it receives from the server to the environment variable CISCO_SPLIT_DNS which is evaluated by the vpnc-script.
Example:
$ sudo CISCO_SPLIT_DNS=~example.com,~example.net,~168.192.in-addr.arpa openconnect vpn.example.com
.
.
.
Got search domain ~com
.
.
.
Result:
$ resolvectl status tun0 --no-pager
Link 8 (tun0)
Current Scopes: DNS
Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
Current DNS Server: 192.168.1.1
DNS Servers: 192.168.1.1
DNS Domain: ~168.192.in-addr.arpa ~com ~example.com ~example.net
To get rid of the pushed search domain I run resolvectl domain tun0 ~168.192.in-addr.arpa ~example.com ~example.net after establishing the connection but an openconnect option to ignore pushed search domains would be the proper solution, I guess.
Keep up the excellent work.